Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
File:                     ntoJbbyNWaRCchzBadautkn1_T8.mft (raw, json)
Hash identifier:          tG72l489ES1vxxxKBlTGfJ/xvSQX2abwx8DurC2KumM=
Subject key identifier:   A3:55:81:61:63:B0:41:89:6A:D7:1E:93:93:0C:63:0D:79:CB:82:9A
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Certificate issuer:       /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial:       0193655707FC079F8C3522C7808AD9DB6CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
Manifest number:          082B
Signing time:             Mon 25 Nov 2024 22:00:22 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:22 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:22 +0000
Files and hashes:         1: fOa5NCQmtWasl4lGacSv5CqtTuE.roa (hash: WtffO3fDKA3xIypbCOHAp8IkFJsEIU9sxb+c5DJyI0s=)
                          2: ntoJbbyNWaRCchzBadautkn1_T8.crl (hash: ohGS5cW44y5gNC4J233+6GWOKUALz/LiFbMQvjHyXT0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:07:fc:07:9f:8c:35:22:c7:80:8a:d9:db:6c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
        Validity
            Not Before: Nov 25 22:00:22 2024 GMT
            Not After : Nov 26 22:00:22 2024 GMT
        Subject: CN=a355816163b041896ad71e93930c630d79cb829a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:5f:be:9c:f1:2e:51:5e:ed:e7:09:dc:a7:
                    be:c4:d7:d4:7a:0d:a4:69:86:79:13:26:ee:7f:95:
                    8c:7b:28:b7:d5:ab:ba:19:7a:00:7c:2f:d8:9c:db:
                    a3:13:3a:1b:9e:78:d0:fd:24:3f:d2:71:97:70:fc:
                    17:70:87:5e:a0:51:be:b8:f2:35:58:b1:c9:19:06:
                    30:dd:1d:25:3e:b4:d1:09:f7:a6:4f:b8:37:57:57:
                    ca:f4:8c:36:cf:3d:a1:88:71:3c:a3:74:86:e2:e5:
                    74:e0:a4:74:f0:20:bc:c4:87:4b:91:72:c0:92:e1:
                    a1:7d:6d:5e:ac:50:a6:e0:bd:17:8a:11:d4:c5:fc:
                    1a:74:0a:56:66:24:55:0a:0b:71:56:91:28:50:df:
                    70:9c:1a:0c:1f:64:9e:f9:27:00:b8:dc:af:94:50:
                    5f:74:4e:2a:4f:5f:3d:04:13:83:51:64:23:ec:1f:
                    df:53:a7:d1:1c:b9:8e:ba:46:5c:1c:6e:26:86:41:
                    6b:d0:de:89:e2:d8:00:c9:5a:17:b3:de:03:e4:f2:
                    83:ad:c9:b5:dd:dd:05:58:4d:b5:e8:3b:80:a9:f3:
                    f7:6e:48:2a:3e:87:32:27:b3:ed:16:b1:31:29:4e:
                    b4:08:c4:dc:b4:88:e1:a6:93:8e:53:62:58:85:60:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:55:81:61:63:B0:41:89:6A:D7:1E:93:93:0C:63:0D:79:CB:82:9A
            X509v3 Authority Key Identifier:
                keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:3e:fb:db:6f:d5:66:bc:67:3d:09:d4:b0:03:8e:66:77:
         2b:cc:1a:19:9e:9a:dd:53:19:4c:04:f4:1b:46:39:e1:63:19:
         6c:39:60:06:76:c7:af:58:a1:1e:63:f9:e2:4c:d5:c3:50:5f:
         35:bd:a2:a0:c8:c9:06:d6:cb:7c:d5:8d:bd:55:9b:46:41:21:
         3e:26:7a:20:e4:c3:d6:0a:54:71:e8:1c:39:42:a7:87:2d:d9:
         8a:ee:21:2a:6c:19:73:ed:a2:e5:53:c4:26:c3:06:3f:e2:9a:
         3b:4b:84:51:d9:2e:5f:6c:62:4a:25:9c:01:e6:bf:1f:a8:38:
         fd:c9:86:da:f7:23:ee:2b:31:51:4c:5e:c3:83:9f:4f:b2:c0:
         6f:bc:b1:47:50:fc:81:cf:7c:02:49:6a:c5:47:dc:81:10:a8:
         c1:c5:f2:20:3e:a3:8a:71:19:f1:06:f0:98:28:1c:e1:b9:22:
         c6:68:b2:df:a0:14:cb:da:95:89:0d:81:7f:e9:82:36:11:0a:
         fa:9a:4b:e1:43:49:95:f3:c1:8d:76:56:77:78:7e:cb:70:a3:
         cf:39:55:b5:83:dd:60:d7:2c:7b:1d:c0:31:09:9d:12:83:a7:
         91:a2:11:65:cc:c5:d8:47:40:55:f5:99:0a:26:69:b4:76:26:
         1b:15:a0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:51 2024 by rpki-client on console-ams.rpki-client.org